Transport Layer Security (TLS) is a cryptographic protocol for protecting data in transit. It preserves the privacy and integrity of internet communications and supports endpoint authentication, making it central to secure exchanges between devices and servers. section 7.3.2
TLS supports practical security goals during network communication:
- Protects exchanged data from eavesdropping, interception, and theft while it travels between systems. section 7.3.2
- Helps ensure that received data is complete and unaltered by preventing tampering during transmission. section 7.3.1 section 7.3.2
- Underpins HTTPS, securing communication between a user’s device and a server during online transactions. section 7.3.1
- Requires current protocol versions: TLS 1.2 and later are treated as secure, while TLS 1.1 and earlier are susceptible to known attacks. section 7.3.1
Securing an online transaction
When a user sends sensitive information to a server through HTTPS, TLS encrypts the communication and helps prevent an interceptor from reading, copying, or altering the data in transit. section 7.3.1 section 7.3.2














